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In this paper, we present an integrated structural and behavioral model of Reo connectors and Petri 
nets, allowing a direct comparison of the two concurrency models. For this purpose, we introduce 
a notion of connectors which consist of a number of interconnected, user-defined primitives with 
fixed behavior. While the structure of connectors resembles hypergraphs, their semantics is given in 
terms of so-called port automata. We define both models in a categorical setting where composition 
operations can be elegantly defined and integrated. Specifically, we formalize structural gluings of 
connectors as pushouts, and joins of port automata as pullbacks. We then define a semantical functor 
from the connector to the port automata category which preserves this composition. We further show 
how to encode Reo connectors and Petri nets into this model and indicate applications to dynamic 
reconfigurations modeled using double pushout graph transformation. 

1 Introduction 

Reo [1] is a channel -based coordination language which has its main application area in component 
and service composition. The idea in Reo is to construct complex, so-called connectors out of a set of 
user-defined primitives, most commonly channels. Among a number of sophisticated features, such as 
mobility [11], context-dependency [6, 5] and dynamic reconfigurability [14], on a more basic level Reo 
can be seen also as a model of concurrency. Comparing Reo with Petri nets, the first obvious common- 
ality is the fact that they both use a graph-based model, i.e. their structure can be modeled using typed 
graphs. Moreover, both models combine control-flow and data-flow aspects. In this paper, we are par- 
ticularly interested in the concurrency properties of the two models, i.e. parallel or synchronized actions 
vs. interleaved or mutually excluded actions. To understand the relationship between Reo connectors 
and Petri nets, we follow an approach in this paper where we map both models to so-called port au- 
tomata [13], which serve as our common semantical domain. We can thereby gain an integrated view on 
structure and semantics of Reo connectors and Petri nets and moreover compare both models. 

As a motivating example, Fig. 1 depicts a Reo connector, a Petri net and a port automaton, all 
modeling the same simple protocol. If considering the initial state also as final, the accepted language 
is {AB + CD)*. Port automata model explicitly synchronization of actions. This is witnessed by the fact 
that the transitions in the automaton are sets of truly concurrent actions. Such a port automaton transition 
corresponds to a concurrent firing of transitions in a Petri net, or a synchronized activity on nodes in a 
Reo connector. This is our starting point for using port automata as a common semantical models for 
the structural models of Reo connectors and Petri nets. Our general idea is to compose - potentially 
user-defined - primitives into a graph-structure which we will refer to as connector. While in Reo, these 
primitives are communication channels, in Petri nets we consider places as primitives. Moreover our 
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(a) Reo connector (b) Petri net (c) Port automaton 

Figure 1 : Three descriptions of the same protocol. 



approach emphasizes compositionality, i.e. the port automata semantics of primitives is predefined, but 
the semantics of connectors is derived using a join-operation. 

We make the following contributions in this paper. We present a model of connectors which combines 
structural and behavioral descriptions. The structure of connectors resembles hypergraphs and their 
semantics is defined using port automata. Our most important result is the compositionality of the model 
in the following sense: a structural gluing of connectors corresponds to a join of the corresponding port 
automata. For this puipose, we define the categories Connector and PortAut, and a contravariant functor 
J^em : Connector — > PortAut op . In categorical terms, our compositionality result means that this functor 
sends pushouts of connectors to pullbacks of the corresponding port automata, i.e. for connectors ^o> 
and ^2: 

^emi^x + % <&) = S?em{<€ x ) x yem ^ o) S?em($i). 

Furthermore we show how Reo connectors and Petri nets can be modeled directly in our framework. 
While for Petri nets, compositionality results similar to ours exist already, this paper constitutes the first 
formal integration of the graph structure and the automata semantics of Reo connectors. Further it is 
a starting point for synthesis algorithms and in particular for semantics of graph transformation based 
reconfigurations. Specifically, our composition operation fits into the double pushout approach [8, 10] 
for graph transformation, which has been used for instance to model reconfigurations of Reo connectors 
in [14], and of Petri nets in [15]. 



Organization. The rest of the paper is organized as follows. We start with the semantical model 
by introducing port automata in Section 2. Based on this, we then define our notion of connectors in 
Section 3. Section 4 contains our main compositionality result and Section 5 shows how Reo connectors 
and Petri nets can be encoded in our connector model. Finally, Section 6 contains a discussion and future 
work, and Section 7 includes related work. 



2 Port automata 

Port automata are an operational model for connectors and have been mainly studied in the context of 
Reo. They are an abstraction of so-called constraint automata [3] which is the quasi-standard semantics 
of Reo. Port automata describe the synchronization on sets of ports, depending on the internal state of the 
connector. The model abstracts from both the direction and content of data flow. For a proper modeling 
of data we refer to the constraint automata model. 
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In this paper, we present port automata in a categorical setting, i.e., we consider them as objects in a 
category which we will denote with PortAut. We now give the definition for port automata. 

Definition 1 (Port automaton). A port automaton A = (Q,N, consists of a set of states Q, a set of 
port names N, a transition relation — »C Q x 2 N x Q and an initial state i £ Q. 

We denote transitions often as q — ► p with q,p G Q and S C N. The interpretation is that there 
is concurrent activity at the ports S and no activity at the rest of the ports N\S. The model permits X- 
transitions, namely whenever 5 = 0. Hence, there can be silent steps without any action. In the following 
we define a notion of port automata morphism. 

Definition 2 (Port automata morphism). A morphism of port automata f : A\ — > A2 is a pair of functions 
f = (f<2,fy) with fQ'.Qx — > Q2 and fy : N 2 — > N\, such that: /q(i"i) = i 2 and for all transitions q p 
in A\ there exists a transition f()(q) /q(p) i n A2 with 

fy(N 2 )nSi=fy(s 2 ). (i) 

Port automata morphisms can be seen as a kind of simulation. The definition uses a function for 
relating the states of the automata instead of a relation, which one might expect for a simulation of au- 
tomata. However, in our categorical context, especially when mapping connector morphisms to (inverse) 
simulations, this definition is sufficient and easier to handle. Note further that the port names are mapped 
in the opposite direction and that condition (1) defines S 2 as the restricted preimage of Si. The following 
example illustrates this notion of automata morphisms. 

Example 1. An example of a port automata morphism is depicted in Fig. 2. States qo,q 2 are both mapped 
to po, and qi is mapped to p\. The port names function is the inclusion map in the opposite direction. 
The transition via {B,C} in the source corresponds to the transition via {B}, and {C} to the %-step in 
the target automaton. 





a {A} 

{B} 



Figure 2: A morphism of port automata. 

Note that if the port name map fy is the identity, a morphism also gives rise to a language inclusion. 
If there is no confusion, we abuse notation and write / for both fg and fy. If there is a morphism 
between two port automata Ao and A\, we may also write Aq y A\ for short. Similarly, if there exists a 
(categorical) isomorphism, we denote this by Ao = A\ . Note that this notion of behavioral equivalence is 
stronger than usual definitions, e.g. using bisimulations. 

Composition and identity of port automata morphisms are defined componentwise in Set. The result- 
ing category of port automata is denoted by PortAut. The port automaton with one state, an empty port 
names set and a T-transition is the final object in this category, denoted by 1. At this point, we already 
make use of our categorical setting and define composition of port automata using pullbacks. 
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Figure 3: A pullback of port automata. 

Theorem 1 (Pullbacks of port automata). The category PortAut has pullbacks and they can be con- 
structed componentwise in Set. For a cospanA[ — >Ao^A2, the pullback object is A3 = (63,^3,— >3,?3) 
where 

• Q3 = Qi x g Q2 (pullback in Set) 

• N3 = N\ +n N 2 (pushout in Set) 

• h = (h , 12) 

• if q\ p\ and q2 —^2 P2, such that 




gi(s l )ng 2 (N 2 ) = g 2 (s 2 )ng i (N l ) 

then (<7i,<? 2 ) >■ \PhP2) mA 3 . 



(2) 



Proof sketch. It is sufficient to show that the componentwise construction of gi,g2 and h yields valid 
morphisms of port automata, i.e. that condition (1) holds. A detailed proof is given in the appendix. □ 

Example 2. An example of a port automata pullback is depicted in Fig. 3. The state maps are indicated 
by the indices, e.g. po is mapped to qo and pi,p\,p2 are all mapped to qyi- The resulting automaton 
on the bottom right is the automaton from our previous example in Fig. 1. Note that it actually includes 
more states which are not shown here because they are unreachable. 

We use the default notation for pullbacks of port automata, i.e. A3 = Ay Xa A%. This notion of com- 
position generalizes the join-operation in [13] for port automata and in [3] for constraint automata since 
it allows a composition along a common interface automaton. In the traditional approaches, automata are 
joined only along a common set of port names. Moreover, the categorical construction using pullbacks 
includes the morphisms into the original automata and thereby relates them with the result using simu- 
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lations. Note also, that we have indirectly shown that PortAut has general limits, since it has pullbacks 
and a final object. 

In the following theorem, we phrase a basic compatibility result for port automata morphisms, which 
is a direct consequence of the pullback construction. 

/] f 2 

Theorem 2 (Compatibility with simulations). Given two cospans of simulations A\ — ► Ao < — A 2 and 

B\ — > Bo < — B2, then 

(a) for three morphisms hi : A, — ► B, with i £ {0, 1,2}: 

• ifh)°f\ =h\ og x andh of 2 = h 2 og 2 then (A\ x Ao A 2 ) h (Bi x Bo B 2 ). 

(b) ifA\ >z Bi andA 2 y B2 then (Ai x Ao A 2 ) y (Bi x B2). 

Proof. Consider the following diagram where (1) and (2) are pullbacks of the given cospans: 




The precondition of (a) states that the top-face and the back- face commute and (1) commutes as it is a 
pullback. Hence g\ o h\ o f[ = g 2 o h 2 o f 2 : A3 — > Bo. The morphism h^ is then uniquely determined by 
the pullback (2) and hence A3 y_B^. For (b) we take Bo = 1 the final object and automatically obtain the 
precondition of (a). Thereby: (Ai x Ao A 2 ) y (Bi xiB 2 ) = (Bi x B 2 ). □ 

Based on the given semantical model, we are now able to enrich it with structural aspects. We do so 
by introducing our notion of connectors in the following section. 

3 Connectors 

The model that we use here is motivated by the idea of constructing complex connectors out of a set of 
primitives with predefined behavior. In our context, the primitives are specified as port automata and 
connectors are just collections of port automata with overlapping port names. 

Definition 3 (Connector). A connector ^ = (srf ,JV) consists of a set of port automata stf and a set of 
nodes J/ , such that N C JV for all A = (Q,N, — >, i) £ srf . 

Port names can now be interpreted as nodes and the port automata as edges in a hypergraph. We will 
refer to the port automata in a connector as primitives. As mentioned already, the idea is to construct 
arbitrarily complex connectors out of a fixed class of primitives, e.g. the set of standard channels in Reo. 

Definition 4 (Connector morphism). A connector morphism f : ffi — ► ^2 is a pair of functions f = (f^ : 
si\ — > £^2if,jV '■ <rf\ ^2) such that for all A = (Q,N, — G si\ there exists a port automata morphism 
f A :fAA)^Awithf A (N)=fy(N). 

A connector morphism consists of a map of nodes and a map of primitives from the source to the tar- 
get connector. Moreover, for all mapped primitives there must exist simulations in the opposite direction, 
and the port name map must be compatible with the nodes map. It is worth mentioning at this point, that 
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the existence of an inverse simulation has the consequence that a primitive can in principle be mapped to 
primitive with potentially different interface (port name sets) and behavior (port automaton itself). Due 
to this property, connector morphisms permit a refinement of primitives. 

Composition and identity of connector morphisms are again defined componentwise in Set. We 
denote the category of connectors and their morphisms as Connector. We use pushouts to compose 
connectors. This makes the approach particularly interesting for applying algebraic graph transformation 
techniques for modeling reconfigurations (cf. [14, 12]). 

Theorem 3 (Pushouts of connectors). The category Connector has pushouts. For a span of connectors 
<— — > ^2 the pushout object is given by ^3 = (3/3, J/3) with 

• = £/i +jrf (pushout in Set) 

• ,yV?, = jY\ + jy Jf 2 (pushout in Set) 

• for all A Q G M), Ai = /i(A ) and A 2 = f 2 (A ) : 
A3 =A\ x Aa A 2 G (pullback in PortAut) (3) 

. for all A j G ^j\fj(M)), j G {1,2} : 

A 3 =Aj£,$f 3 (4) 

Proof. Due to the componentwise construction in Set and PortAut again we have to show only that the 
construction yields a valid connector ^3 and valid connector morphisms g\,g 2 and h. The connector % 
is valid since 

n 3 =n 1 + No n 2 c r yn+^ Q ^2 = ^n 

in case (3) and N3 = Nj C J/j = J/3 in case (4). Moreover, for every A G srfj there exists a port automata 
morphism gA : gj(A) — > A. In case (4) it is the identity and in (3) it is the projection of the pullback. 
Since the port name maps in gA and gj are both constructed as the injections into N3 and J/3 respectively, 
gA(N) = gj(N) holds as well. Hence, gi,g 2 are valid connector morphisms. Validity of h can be shown 
analogously. □ 

Example 3. A pushout of Reo connectors in purely structural notation is depicted in Fig. 4. In this 
notation, nodes (which correspond to port names) are depicted as filled circles. The port automata 
semantics for the different channel types are given in Fig. 5. So-called FIFO channels are asynchronous 
channels with a buffer of size one. They are represented as arrows with a rectangle in the middle. There 
are in fact two versions of this channel type: with and without a token, respectively called FullFIFO 
and EmptyFIFO. Circles with a cross denote two dual primitives: the Router (left of the FullFIFO) 
and the Merger (right of it). Both have in total three ports and the same semantics (cf. Fig. 5 for their 
port automata semantics). 

Note that we abused notation in this example, in the sense that there are two hidden nodes between 
the Router, the FullFIFO and the Merger. The resulting connector on the bottom right is the initial 
example from Fig. 1. It consists in total of five primitives (three FIFOs, one Merger and one Router) 
and six nodes (A-D, plus two hidden ones). 
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Figure 4: A pushout of Reo connectors. 



4 Compositional Semantics 



In this section we show how to compute the port automaton for a connector using its primitives' seman- 
tics. We extend this mapping to a functor and show compositionality. 

Remark 1. In the following definitions we use the fact that the product is associative and commutative, 
i.e. there exist natural isomorphisms (AxB) x C = A x (fixC) and A x B = B x A. 

Definition 5 (Connector semantics). Given a connector = (s$ ', jY) with si = {Ai , . . . ,A n } and A; = 
(Qj,Nj,^j,ij)for j e {!,...,«}. We define 



yem(tf) = (<2i x . . . x Qn,jr t -►, <ii , . . .,/„)) 



where — > given fry: 



Vj,k€ {l,...,n} : qj —^j pj, q k ^kPk, SjnN k = S k C]Nj 

, , 5iU...US„ , , 

(qi,...,q n ) > {pi,...,p„} 



(5) 



Note that the nodes of the connector become the port names of the resulting port automaton. The 
definition further implies that all actions on a (shared) node are synchronized. This corresponds to 
so-called Hoare-style synchronizations, as opposed to Milner-style synchronizations where exactly one 
input end is synchronized with one output end. We extend now the given connector semantics to a functor 
S^em : Connector — ► PortAut op . 

Theorem 4 (Semantics functor). Let f = ij^^fj/) '• ^i — ► a connector morphism, 5?em(^\) = 
>i,ti) and Sfem^i'i) = (^2,-^,^2,12) where ^ = with srf\ = (Ai,...,A„) and 

fAj = xf(j -f\ )-f,{'\i) >A } . Let 

fa = f(h x ... x/ e „ : 2^ ^1, 

then there also exists a projection %q : i?2 - ► Q- Defining S fi em{f) : J^emiffi) —* <5^em{^€\) as S /fi em{f) = 
{f& °^Q:f^y) gives rise to a contravariant functor .5^em : Connector — > PortAut op . 
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Proof. Q is the product of the state sets of those primitives in ^2 that are in the image of f^, and %q 
the projection to the product of the state sets of these reached primitives. The states map of S e em{f) 
preserves the transitions of S fi em{^ l 2), since both Kq and fg do. Hence, S fi em(f) is a valid port automata 
morphism. For showing that y^m is a functor we observe that composition is preserved: 5 fi em{g o 
/) = yem((gtf,g^) o (/>,/») = ^(^0/^,^0/^) = (/jo^,/ / o g/ ) = {fgof^y) o 
(gg,g,yy) = yem(f) o yem(g), and analogously for the identity. □ 

This result in particular shows that a (structural) morphism of connectors corresponds to an inverse 
simulation on the semantical level. We now phrase our main result, i.e., the compositionality of the port 
automata semantics for connectors. 

Theorem 5 (Compositionality of semantics). The functor y 7 em maps pushouts of connectors to pull- 
backs of port automata, i.e. 

,9>em^ v + % <T 2 ) = yem^r) Xy em{%) ^em^). 

Proof. Both in Connector and PortAut the port name sets are composed using pushouts in Set, and 
5?em preserves these sets. Hence, the port names are correctly mapped. The primitives in the connector 
pushout ^3 = ^1 ^2 are either of the form A 1 x a q A2 (case (3)) or Aj = Aj x 1 1 with j G { 1 , 2} (case 
(4)). The primitives' state sets are of the same form, i.e. they can be all written as pullbacks. ^em sends 
these state sets to their product. Now, since 

(X X Y Z) X (X' XyZ') = (XxX') X {Y xY>) {Z X Z') 

the state set of the resulting automaton A3 = S fi em(^) is of the form Q\ Xq Q2 where Q\ is the state 
set of 5^em{^€\), and Q2 of S fi em{ c ^2) and Qq of S^em^o). Hence, the (initial) states are also correctly 
mapped. Moreover, the transition structure is preserved, since (5) implies (2) and the port name sets on 
transitions are in both cases composed by taking their union. □ 

5 Applications 

In this section, we show how Reo connectors and Petri nets are modeled by our notion of connectors. 
This enables us also to do a direct comparison of the two models. 

5.1 Modeling Reo connectors 

Reo connectors are directly modeled by our notion of connectors. The primitives used in this paper are 
summarized in Fig. 5. It includes in particular the channel types Sync, EmptyFIFO and FullFIFO. Note 
also that all primitives explicitly include T-steps to allow interleavings, i.e. other parts of the connector 
can fire independently without (observable) activity of such a primitive. 

While channels are user-defined entities, Reo defines a fixed semantics for nodes. A node in Reo 
merges input from all target ends ends and replicates it to all source ends. This can be seen as a 1 : n 
synchronization, as opposed the Hoare-style synchronizations in our framework, where basically all 
coinciding channel ends (no matter if source or target) are synchronized. As a consequence we have to 
model the merging explicitly using a primitive. The Merger, denoted by a circle with a cross in Fig. 1, is 
used for this purpose. It has two source and one target end and is therefore not a channel. We also define 
the dual of this primitive, called Router. It has the same semantics but its ends are inverse. Note again, 
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(a) Sync(A,B) = (b) EmptyFIFO(A, B) = (c) Router(A, B, C) = 
S^nc(B,A) FullFIFO(B,A) Merger(B,C,A) 



Figure 5: Port automata for some Reo primitives. 

that in the example of Fig. 5 and 4 there are two hidden nodes between the Router, the FullFIFO and 
the Merger, which are not relevant here. 

The pushout diagram in Fig. 4 shows a gluing of two Reo connectors along a common subconnector. 
Note that this gluing is of a purely structural nature, although - in principle - it could also include 
a refinement of primitives, i.e., if one of the primitive simulations is not an isomorphism. The port 
automata corresponding to the connectors in this example are depicted in Fig. 3. As we have shown in 
Theorem 5, they form a pullback. Note again, that we omitted unreachable states in the result. 

5.2 Modeling Petri nets 

Petri nets can also be modeled directly with our connector notion. As illustrated in the motivating ex- 
ample in Fig. 1, transitions in a Petri net should be interpreted as nodes in this setting. Hence, places 
become the primitives in the connector model. They are basically unbounded buffers without ordering 
constraints (as opposed to the FIFO channel in Reo). 

Formally, the port automaton A p = (Q,N, — >,i) for a place p with in(p) and out(p) respectively the 
sets of incoming and outgoing transitions 1 of p is defined in the following way: 

• Q is the set of all markings of p, e.g. the natural numbers, or a finite set for places with capacities. 

T 

• m — > m' whenever a concurrent firing of the transitions T C in(p) Uout(p) turns the marking m 
into m'. 

• i G Q the initial marking of p. 

This encoding works because the transitions in a Petri net also do a basic Hoare-style synchronization. 
Without giving a proof, we claim that the port automaton J^em(N) of a Petri net N correctly models its 
behavior, in the sense that it has the set of all possible markings of the net as states and transitions that 
correspond to a concurrent firing of net transitions. 

Our notion of connector morphisms requires that the ports of primitives are preserved. Since we 
interprete places as primitives (and transitions as nodes) our connectors correspond to the following Petri 
net model: 

in 

N = P^^T®. 

out 

Note that in the literature (see e.g. [15]) one often finds a similar but different model of Petri nets, where 
instead of the maps in, out functions pre, post : T — > P® are used. However, this only modifies the notion 
of net morphism, but not the Petri net model itself. A comparison of the two types of Petri net morphisms 
is out of the scope of this paper. 



This can be seen as the dual of the usual notion of pre- and past-sets of Petri net transitions. 
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5.3 Comparing Reo connectors and Petri nets 

As made evident in this paper, one can compare the basic version of Reo nodes, which does only a 
primitive synchronization, with the transition concept in Petri nets. On the other hand, primitives in 
our framework correspond to the places in a Petri net and the channels, mergers, routers etc. in a Reo 
connector. Reo is more expressive in the sense that it allows unbuffered primitives, such as synchronous 
communication channels. In Petri nets, the primitives, i.e., the places are always buffered. From our 
point of view, this is the most important difference between Reo connectors and Petri nets: while in Petri 
nets synchronizations happen always locally at transitions, in Reo synchronous primitives can be used 
to propagate synchrony through the connector. Other features of Reo, such as context-dependency and 
priority go beyond the focus of this paper. 



5.4 Modeling Reconfigurations 

Graph rewriting techniques, such as the double pushout (DPO) approach [8], are a powerful tool for 
modeling rule -based reconfigurations. As a motivating example we return to the pushout of Reo connec- 
tors in Fig. 4. This diagram can be interpreted as a reconfiguration in the following sense. The upper 
two connectors together with the morphism between them is interpreted as a (structural) reconfiguration 
rule. An application of this rule creates a new EmptyFIFO between the nodes A and B. The bottom two 
connectors can be regarded as an application of this rule. In the bottom left is the connector before, and 
in the bottom right after the rule application. 

In our approach we can now perform this reconfiguration directly on the corresponding automata. 
This becomes particularly interesting when executing such a Reo connector as a state machine and re- 
configuring it at runtime. A prototypic implementation of this approach exists already. A typical question 
in such scenarios is what the state of the connector after a reconfiguration is, and whether it is actually 
valid. We can make this clear in the corresponding automata pullback in Fig. 3. For instance, if the con- 
nector before the reconfiguration is in state r\ , we can see that in the connector after the reconfiguration 
the state s\ is mapped to r\ by the constructed morphism. Thus, we can use this morphism to identify 
the state after a reconfiguration step. However, we can see also in this example that has a preimage 
in the target automaton that is an unreachable state. This indicates that a reconfiguration in this state 
produces an invalid system state. In our example first B and then C fired, and then the reconfiguration 
was performed. The problem here is essentially that at this point there are two tokens in the connector. 



6 Conclusions and Future Work 

We have presented an integrated structural and behavioral model of connectors and showed composition- 
ality with respect to gluing constructions. We have then shown how Reo connectors and Petri nets can 
be modeled in this framework. 

As future work, we would like to consider the traditional model of simulations for port automata 
morphisms, i.e. instead of functions we want to use a notion of upward-closed relations for relating the 
states. With this change, the model will cover a wider class of connector morphisms. Moreover, we are 
interested in further properties of the semantical functor. 



Christian Krause 



67 



7 Related work 

Padberg et al. provide compositional semantics of Petri nets in [15]. Their results are based on pre/post- 
net morphisms and a marking graph semantics, and they cover a wider class of Petri nets. Moreover, the 
authors show preservation of general colimits, as opposed to our work were we consider only pushouts. 

A wide range of automata semantics for Petri nets exist. For instance, Droste and Shortt consider 
so-called automata with concurrency relations in [9], which are more restrictive than port automata. 
Essentially, a concurrent firing of two net transitions always implies the existence of an interleaved 
execution of the two net-transitions (parallel independence). The authors show that there is a coreflection 
between the category of Petri nets and automata with concurrency. Pushouts or general colimits are not 
considered. They further also use a non-standard notion of net morphisms. 

A compositional automata semantics for Reo, called constraint automata, is given by Baier et al. 
in [3]. Our port automata are an abstraction of constraint automata. The main difference is the used no- 
tion of compositionality. In [3], with compositionality the authors mean that the semantics of a connector 
can be computed out of the semantics of its constituent primitives. However, our notion of composition- 
ality really combines the structural level with the semantical, in the sense that we show how a gluing 
of connectors corresponds to a join operation of their behaviors. In particular, we generalize the join 
operation of [3] by allowing to join two automata along a common interface automaton. 
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A Proofs 

Theorem 1. Let j G {1,2}. The pullback morphisms gj = {gj,Q,gjjf) consist of the projections gj g : 
(?3 — > Qj and the injections gjjj : Nj — > N$. We will denote both of them with gj if there is no confusion. 
We have to show first that g\ and g2 are in fact PortAut-morphisms. Condition (1) in the morphism 
definition reads for gy. 

gj(N j )n{ gl (s 1 )[jg 2 (s 2 ))=gj(Sj) 

We show this here only for j = 1, since the other case is analogously: 

gi(Ni)n( gl (s 1 )ug2(s 2 )) 

= (gi(M)ngi(Si)) u (gi(Ni)r\g 2 (s 2 )) 

= gi(S 1 )u(g 1 (N i )ng 2 (S 2 )) sinceSjCM 
= gi(S 1 )U(g 2 (N 2 )ng 1 (S 1 )) by (2) 

= gi(Si) 

Now, the arrow h : A3 — > X exists and is unique due to the componentwise construction in Set. What 
is left to show is that h is also a valid PortAut-morphism. We know for all q — ► p in X there exist 
transitions hj(q) —^j hj{p) in Aj with 

hj(Nj)nN = hj(Sj) (6) 

since the hj are by assumption valid morphisms. Moreover we know that h maps a state q G Qx in the 
automaton X to the state h(q) = (h\(q),h 2 (q)) in the pushout object A3. Now we have to show that there 

exists a transition h(q) —^3 h(p) in A3 with 



h(N 3 )nN = h(S 3 ). 
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We construct S3 in the following way: 



h(N 3 )nN = h(g 1 (N 1 )Ug 2 (N 2 ))nN 

= (hog l (N l )Uho g2 (N 2 ))nN 

= (/i 1 (M)u/i 2 (A r 2 ))niV 

= (h 1 (N l )nN)u(h 2 (N 2 )nN) 

= hi(Si)Uh 2 (S 2 ) 

= hog l (Si)Uhog 2 (S 2 ) 

= h(g 1 (S 1 )Ug 2 (S 2 )) 



pushout in Set 

since h o gj = hj 

by (6) 
since hogj = hj 



We have constructed S3 = g 1 (Si ) U g 2 (S 2 ) and it fulfills the required property. The last step is to show that 
this transition in fact exists in A3, which means that (2) holds. Recall that g\ and g 2 are valid morphisms: 

gi(N 1 )nS 3 = gi(S 1 ) and g 2 {N 2 ) nS 3 = g 2 (S 2 ). 

We can follow that: 

• (gi (Ni) n s 3 ) u 82 (s 2 ) = gi (Si) u g2 (s 2 ) 

• (gi(N 2 ) n s 3 ) ugi(Si) = 82 (s 2 ) ugi(Si) 

and unify both equations: 



(g 1 (N 1 )ns 3 )ug 2 (s 2 ) 
[gi(Ni)n(g 1 (s 1 )u g2 (s 2 )))u g2 (s 2 ) 

{gi(Ni) u g2 (s 2 )) n (gi(Si) u g2 (s 2 )) 
{gi(N 1 )ug 1 (s 1 ))ng 2 (s 2 ) 
gi(Ni)n g2 (s 2 ) 

and we have shown (2). 



44> 



( g2 (N 2 )ns 3 )iJgi(s 1 ) 
(g2(N 2 )n(g 1 (s 1 )ug2(s 2 )))ug 1 (s 1 ) 
{g 2 (N 2 )u 8l (s 1 ))n( 8l (s 1 )ug 2 (s 2 )) & 
{gi(N 2 ) ug 2 (s 2 ))ngi(Si) ^ 
g 2 (^ 2 )ngi(Si) 



□ 



